Secure, kernel-enforced sandbox CLI and SDKs for AI agents | Heykuki News